Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: hseBdIJ7RsZzbVUBn5rNToHp4o+H6A1uchSfyT+gaLY=
Subject key identifier: 2A:FC:7D:18:EC:17:BC:5B:C0:2D:FD:C9:C1:96:14:16:64:9F:D6:7E
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019DA41D0AD86345DE908AA61A3CE9EC0F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0F55
Signing time: Sun 19 Apr 2026 05:00:59 +0000
Manifest this update: Sun 19 Apr 2026 05:00:59 +0000
Manifest next update: Mon 20 Apr 2026 05:00:59 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: jk1PiUk0lss4Qtw0fcf8t+INh21g7dG5XlA6QUtxlFg=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:0a:d8:63:45:de:90:8a:a6:1a:3c:e9:ec:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Apr 19 05:00:59 2026 GMT
Not After : Apr 20 05:00:59 2026 GMT
Subject: CN=2afc7d18ec17bc5bc02dfdc9c1961416649fd67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:12:39:5e:3e:5d:6f:1f:5c:04:50:89:1e:
e2:82:fb:63:87:41:81:1d:db:47:47:85:1e:b1:7b:
1c:78:2c:50:f8:76:2a:14:f1:ab:e8:0d:0a:a0:4a:
2a:cd:ed:39:81:c9:dd:9e:6c:1d:7f:00:61:4a:34:
a3:64:87:75:4c:1e:ae:f9:0c:fe:c5:b3:e5:b9:e0:
7c:c3:b3:ac:13:c3:2f:a7:a8:bb:c2:5a:1c:75:aa:
b2:ce:1a:55:cf:75:49:a2:8b:2c:68:71:1d:7a:c4:
9f:fe:80:ce:17:b5:ac:a3:21:24:b9:1b:32:fa:64:
4e:ce:39:d6:2e:7b:ec:57:69:e0:19:43:0a:7f:ed:
0c:ed:cf:50:89:01:30:aa:eb:e0:3e:7f:b9:6f:5b:
03:74:0c:29:88:9a:53:cd:85:88:cc:65:ee:a6:6f:
04:7b:8b:18:d5:87:20:6f:06:0f:47:8a:14:7e:ac:
fa:77:9a:9f:d0:c8:f1:1d:f4:97:66:70:92:8b:b3:
1b:4b:0b:39:29:bc:31:e2:a7:e4:01:57:84:ef:ac:
9a:9d:c4:68:77:0c:16:1a:5d:3c:46:84:5d:58:55:
bd:7c:9d:65:82:f0:5f:70:f6:17:62:a6:13:9b:11:
0b:35:77:6f:30:f6:39:1c:11:4e:47:c9:08:10:56:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:7D:18:EC:17:BC:5B:C0:2D:FD:C9:C1:96:14:16:64:9F:D6:7E
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9e:62:a1:50:db:8e:c6:89:9c:50:17:93:17:09:33:42:d0:
c4:a4:2e:89:e6:68:59:5d:aa:8f:d2:2c:83:46:73:9f:79:d0:
0e:bb:c3:38:c7:0a:e8:39:6c:4a:8d:6b:a7:32:e6:e3:d2:e1:
e9:e3:cd:0b:19:0e:0a:cd:08:4e:cc:34:5e:85:4a:ee:f2:f5:
79:59:2f:51:4c:b6:99:7f:ff:38:36:36:31:59:16:cc:0f:49:
f6:9b:91:7e:c4:26:ef:f9:9b:90:86:aa:1c:2c:08:f3:87:1a:
be:20:d1:c8:25:d5:6a:97:60:e8:ae:a0:48:71:5c:18:cb:19:
f2:21:ea:e7:bb:9a:ea:84:2d:bf:6c:ff:db:9f:22:7b:92:e1:
be:bd:a2:7d:93:69:20:75:25:c7:3d:e9:f2:4c:7e:67:44:7e:
8e:31:c1:5c:b6:91:64:b0:23:0e:4c:5a:7c:fe:90:b7:97:b7:
a5:cb:75:aa:59:12:3d:8a:e6:36:be:28:84:2d:8a:f7:4f:af:
80:96:86:a0:ba:e3:94:1c:d0:9c:e7:cb:b4:b1:d0:c8:88:6d:
a0:5a:83:fa:48:31:4c:07:6e:99:23:2d:83:72:1c:1f:df:af:
9e:8d:00:0b:93:e9:0c:0a:e8:44:5d:1f:09:bc:7b:35:fd:12:
ca:96:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:48 2026 by rpki-client